happycoding/civicrm-core-for-drupal

Release historydanger

The last release was about 7 years ago, with no releases in the past 12 months. The package had six releases overall, so current maintenance cannot be considered active.

Dependency profilecaution

The package declares 28 runtime dependencies and no development dependencies, creating a substantial upgrade and compatibility surface for an already stale release. The dependency list is concrete evidence of maintenance burden, not proof of a defect.

Licensecaution

The manifest declares AGPL-3.0 and the artifact contains license files, but detected license text includes MIT rather than the declared license. The multiple license files may reflect bundled components, yet the mismatch needs clarification.

Lifecycle scriptscaution

Post-install and post-update scripts run during dependency operations, increasing installation and upgrade complexity. No provided evidence shows that these scripts are unsafe or unusually broad, so this is a caution rather than a severe risk.

Package file treecaution

The artifact contains more than 10,000 files and substantial application source, consistent with a full CMS integration rather than a small library. Its size increases review and upgrade burden, but the tree also shows a complete packaged project.